Multi SSID (VirtualAP) by using VLAN

1. Create Vlan
2. Configure Wireless Security Profiles
3. Configure Multi SSID with VirtualAP
4. Create Bridge and add Vlan and Wireless Interface to Bridge
5. Configure IP Address for Management Wifi

In this configuration we use MikroTik RBcAP2n with firmware 6.18. We configure this MikroTik for AP only and DHCP Server will provide from main Router.
Vlan 50: Guest user
Vlan 69: Management Wifi
Vlan 72: Staff
Vlan 77: Managment

1. Create Vlan
/interface vlan
add interface=ether1_TO-SW01:P10 name=vlan50 vlan-id=50
add interface=ether1_TO-SW01:P10 name=vlan69 vlan-id=69
add interface=ether1_TO-SW01:P10 name=vlan72 vlan-id=72
add interface=ether1_TO-SW01:P10 name=vlan77 vlan-id=77

2. Configure Wireless Security Profiles
/interface wireless security-profiles
add authentication-types=wpa-psk,wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=bdc supplicant-identity="" wpa-pre-shared-key=BDC@5t@ff
wpa2-pre-shared-key=BDC@5t@ff

add authentication-types=wpa-psk,wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=mgmt supplicant-identity="" wpa-pre-shared-key=@dm!n@MGMT
wpa2-pre-shared-key=@dm!n@MGMT

add authentication-types=wpa-psk,wpa2-psk eap-methods=""management-protection=allowed mode=dynamic-keys name=guest supplicant-identity="" wpa-pre-shared-key=5t@ff@GUEST
wpa2-pre-shared-key=5t@ff@GUEST

3. Configure Multi SSID with VirtualAP
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no distance=indoors mode=ap-bridge ssid=""

/interface wireless
add disabled=no l2mtu=1600 mac-address=4E:5E:0C:86:6A:C5 master-interface=wlan1 name=wlan50 security-profile=guest ssid=BDC-GUEST wds-cost-range=0 wds-default-cost=0

add disabled=no l2mtu=1600 mac-address=4E:5E:0C:86:6A:C3 master-interface=wlan1 name=wlan72 security-profile=bdc ssid=BDC-STAFF wds-cost-range=0 wds-default-cost=0

add disabled=no l2mtu=1600 mac-address=4E:5E:0C:86:6A:C4 master-interface=wlan1 name=wlan77 security-profile=mgmt ssid=SIGROUP-MGMT wds-cost-range=0 wds-default-cost=0

4. Create Bridge and add Vlan and Wireless Interface to Bridge
/interface bridge
add name=bridge-vlan50
add name=bridge-vlan72
add name=bridge-vlan77

/interface bridge port
add bridge=bridge-vlan72 interface=vlan72
add bridge=bridge-vlan72 interface=wlan72
add bridge=bridge-vlan77 interface=vlan77
add bridge=bridge-vlan77 interface=wlan77
add bridge=bridge-vlan50 interface=vlan50
add bridge=bridge-vlan50 interface=wlan50

5. Configure IP Address for Management Wifi
/ip address
add address=172.16.69.200/24 interface=vlan69 network=172.16.69.0

/ip route
add distance=1 gateway=172.16.69.1